You are viewing a plain text version of this content. The canonical link for it is here.

Posted to oak-issues@jackrabbit.apache.org by "Davide Giannella (JIRA)" <ji...@apache.org> on 2017/12/08 14:24:10 UTC

[jira] [Closed] (OAK-6940) Login token name generation is prone to race conditions

     [ https://issues.apache.org/jira/browse/OAK-6940?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Davide Giannella closed OAK-6940.
---------------------------------

Bulk close 1.7.12

> Login token name generation is prone to race conditions
> -------------------------------------------------------
>
>                 Key: OAK-6940
>                 URL: https://issues.apache.org/jira/browse/OAK-6940
>             Project: Jackrabbit Oak
>          Issue Type: Improvement
>          Components: core, security
>            Reporter: Alex Deparvu
>            Assignee: Alex Deparvu
>            Priority: Trivial
>             Fix For: 1.7.12
>
>
> Under high concurrency the {{TokenProviderImpl#generateTokenName}} method can return the same value, causing the commit to fail and be retried with a generic UUID value.
> This seems pretty expensive (benchmarks to follow) and it would probably be best to try using a random value every time, sacrificing the 'human readable' property of the node name.
> fyi [~anchela]



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)